Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
File: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer (raw, json)
Hash identifier: SOW/6/FIAHys8mA86bfWT7BgZr5RVjFW8ORPxXzutEQ=
Subject key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EF8F980ABED657286FBC413032C2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30758
AS: 50540
AS: 59887
AS: 62077
AS: 62095
IP: 185.48.24.0/22
IP: 2a04:b140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f8:f9:80:ab:ed:65:72:86:fb:c4:13:03:2c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:77:98:d1:44:61:b3:00:21:8e:9a:5c:f8:
e3:20:05:77:06:aa:0d:6a:f8:75:e0:14:3a:9c:f7:
73:1b:e3:f3:62:c2:30:1e:9a:1d:08:a5:52:f5:aa:
96:f9:c2:54:0e:b9:b9:c9:e2:11:ca:e4:f6:55:a2:
94:1a:0e:ef:f6:31:7f:5b:0a:a2:51:e6:bc:fc:18:
04:b4:13:78:35:33:a7:80:2f:dc:b1:82:50:65:21:
30:cf:7c:16:48:04:42:05:85:8e:85:0b:d4:6a:9f:
0f:a6:f9:4e:7d:4d:61:cc:ab:14:b9:6e:8d:1c:ef:
fd:a9:52:97:67:70:63:c6:0b:58:ad:7b:bc:5d:0e:
b5:4e:c1:ee:1f:c7:48:67:b5:5d:d8:26:fa:6b:4b:
af:ea:68:3f:18:8b:37:0b:42:f0:fd:e2:a3:e3:d5:
2f:d4:95:2b:89:72:5d:e8:a2:e7:c5:2c:f4:a8:1b:
54:3c:e5:1c:7e:5a:01:42:dc:22:09:8d:c2:de:6f:
c8:a7:df:f7:7c:37:de:ed:8e:d7:49:69:47:59:42:
b0:e5:d3:24:54:d7:c4:01:11:fe:df:a6:24:4b:7a:
ca:7a:34:2b:f5:19:50:ad:9f:4a:ec:17:5c:40:8f:
28:9d:1d:08:88:a0:d1:80:3a:2d:25:c1:df:5e:1b:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/22
IPv6:
2a04:b140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30758
50540
59887
62077
62095
Signature Algorithm: sha256WithRSAEncryption
a6:91:18:1a:54:7d:93:7a:09:e2:b5:91:23:fe:aa:cb:31:2c:
36:90:72:f2:c7:50:66:a9:bc:ad:34:3e:1d:39:90:9e:4a:3b:
0f:b2:b9:cf:5d:5f:13:06:85:45:9f:7f:42:cb:38:e2:01:6e:
d9:10:b8:2c:f7:8f:9e:58:38:a4:f7:88:b8:b9:b4:79:9d:31:
a7:5f:ed:4c:85:d8:a8:44:12:cf:c8:81:fe:27:1e:5e:3b:a2:
a4:6e:6d:17:4a:08:00:f7:a5:f8:c3:dc:e1:55:be:97:3e:2b:
e2:60:e1:17:b5:d6:45:c0:44:bb:4c:8f:39:ad:03:aa:41:de:
1e:43:1c:e4:94:44:a4:d3:2e:f3:b1:cb:dd:ab:45:6f:f1:c2:
67:80:15:21:9a:73:af:0a:82:db:05:d5:c9:5f:9d:97:5b:a0:
57:5c:74:5a:e1:d4:15:42:4f:a1:aa:0c:9d:b0:ad:ac:e8:c2:
72:b7:12:de:26:e1:c2:79:1c:1b:4c:00:4f:ef:ea:8e:20:d9:
8e:f5:b7:3b:41:85:58:1b:3b:10:7f:55:01:91:19:0d:8e:8c:
95:70:d9:ca:c9:f8:6e:8f:9c:ef:3f:06:b6:e0:2b:90:22:41:
e6:3a:7d:67:5d:b1:ae:ef:84:32:d0:a8:a4:ca:65:8d:70:e1:
cb:55:ce:10
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAZQljvj5gKvtZXKG+8QTAywqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTZlZDA1NzljM2ZkMjUzNTk3ZWM4MmYwOTM5MTExYmE5ZDhjODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYx3mNFEYbMAIY6aXPjjIAV3BqoN
avh14BQ6nPdzG+PzYsIwHpodCKVS9aqW+cJUDrm5yeIRyuT2VaKUGg7v9jF/Wwqi
Uea8/BgEtBN4NTOngC/csYJQZSEwz3wWSARCBYWOhQvUap8PpvlOfU1hzKsUuW6N
HO/9qVKXZ3BjxgtYrXu8XQ61TsHuH8dIZ7Vd2Cb6a0uv6mg/GIs3C0Lw/eKj49Uv
1JUriXJd6KLnxSz0qBtUPOUcfloBQtwiCY3C3m/Ip9/3fDfe7Y7XSWlHWUKw5dMk
VNfEARH+36YkS3rKejQr9RlQrZ9K7BdcQI8onR0IiKDRgDotJcHfXhtLzQIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFN5u0FecP9JTWX7ILwk5ERup2MiNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1L2YxM2Y5
OC00ZTdhLTQzNWQtYjFiMC04Mzg2ZTcwYmRjNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvZjEzZjk4
LTRlN2EtNDM1ZC1iMWIwLTgzODZlNzBiZGM1OC8xLzNtN1FWNXdfMGxOWmZzZ3ZD
VGtSRzZuWXlJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTAYMA0EAgACMAcDBQMqBLFAMC0GCCsGAQUF
BwEIAQH/BB4wHKAaMBgCAngmAgMAxWwCAwDp7wIDAPJ9AgMA8o8wDQYJKoZIhvcN
AQELBQADggEBAKaRGBpUfZN6CeK1kSP+qssxLDaQcvLHUGapvK00Ph05kJ5KOw+y
uc9dXxMGhUWff0LLOOIBbtkQuCz3j55YOKT3iLi5tHmdMadf7UyF2KhEEs/Igf4n
Hl47oqRubRdKCAD3pfjD3OFVvpc+K+Jg4Re11kXARLtMjzmtA6pB3h5DHOSURKTT
LvOxy92rRW/xwmeAFSGac68KgtsF1clfnZdboFdcdFrh1BVCT6GqDJ2wrazownK3
Et4m4cJ5HBtMAE/v6o4g2Y71tztBhVgbOxB/VQGRGQ2OjJVw2crJ+G6PnO8/Brbg
K5AiQeY6fWddsa7vhDLQqKTKZY1w4ctVzhA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:27 2025 by rpki-client